General

  • Target

    4c5f45a23283b57ed4574406c5dd622a

  • Size

    83KB

  • MD5

    4c5f45a23283b57ed4574406c5dd622a

  • SHA1

    50ece995972f0f4505125b2da1a1f36170494f8f

  • SHA256

    c6e8e8551026654fe8e421f4769e13a64e5dc4342e9276c1516fb0895da4007e

  • SHA512

    2d90c6c92f0869db6710580f03371dc6be5be9446410ac0d8cfdc0e87c6d8947eb5b74843f07956bd80480c34286eac3d712b249fc870f2308443f86c1baa032

  • SSDEEP

    1536:sR9IBgPTVjAVgnDv+L0YFyPOyMBWrA4yhOl3MAUkbgu9dzvdXeaUw8:sLICxMVgD+L0YFy9rzyha8AUk0yVdPr8

Score
10/10

Malware Config

Signatures

  • ModiLoader Second Stage 1 IoCs
  • Modiloader family
  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 4c5f45a23283b57ed4574406c5dd622a
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections